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IN THE CLAIMS 

The following is a listing of the claims in the application with claims 1, 36 and 
39 shown as currently amended. Claims 2-4, 9, 19-23 and 48-53 were previously 
cancelled. 

LISTING OF CLAIMS 

1 . (currently amended) Method for an operator to dynamically and 
remotely control the pairing of a decoder residing in one unique digital data reception 
equipment (2) with a plurality of different external security modules (6, 8) each 
having a unique identifier and w i th e ach of th e diff e r e nt security modul e s being 
adapted to cooperate with said one digital data reception equipment for controlling 
reception of distributed data by means of said digital data reception equipment (2) 
and with the digital data reception equipment further comprising hsmm a computer 
and a stored program said method comprising the following steps: 

using the computer to verify whether or not the identifier of each external 
security modules (6, 8) is already memorized in an updated list of external security 
module identifiers transmitted to the digital data reception equipment (2), upon 
connection of said external security modules (6, 8) to the digital data reception 
equipment, 

if the unique identifier of the external security modules (6, 8) is memorized in 
the digital data reception equipment (2), transmitting a control signal to the digital 
data reception equipment (2) defining configuration parameters to activate the 
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pairing of said digital data reception equipment (2) with said external security 
modules (6, 8), and 

if the unique identifier of the external security modules (6, 8) is not memorized 
in the digital data reception equipment (2), transmitting a control signal to the digital 
data reception equipment (2) defining configuration parameters to deactivate the 
pairing of said digital data reception equipment (2) with said external security 
modules (6, 8); wherein 

said configuration parameters include at least one of the following functional 
parameters: 

authorizing memorization, 

prohibiting memorization, 

erasing identifiers previously memorized in the digital data reception 
equipment (2), and 

activating or deactivating a verification phase including a procedure 
consisting of disturbing the data processing if the identifier of the connected external 
security module (6, 8) is not previously memorized in the digital data reception 
equipment (2). 

Claims 2-4 (previously cancelled). 
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5. (previously amended) The method according to claim 1 , wherein 
said control signal also includes an indication as to the maximum allowable number 
of identifiers to be memorized in the digital data reception equipment (2). 

6. (previously amended) The method according to claim 1, wherein said 
configuration parameters includes a reconfiguration instruction through which an 
updated list of identifiers of external security modules (6, 8) paired with the digital 
data reception equipment (2) is transmitted to said digital data reception equipment 
(2). 

7. (previously amended) The method according to claim 6, wherein said 
updated list of identifiers is transmitted directly to the digital data reception 
equipment (2). 

8. (previously amended) The method according to claim 6, wherein 
said updated list of identifiers is transmitted through the external security module (6, 
8) connected to said digital data reception equipment (2). 

9. (previously cancelled). 

10. (previously amended) The method according to claim 1, wherein said 
distributed data is either unencrypted or is encrypted by means of an encrypted 
control word and in that each external security module (6, 8) includes access rights 
to said data and a decryption algorithm for said control word. 
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11. (previously amended ) The method according to claim 1, wherein said 
configuration parameters are transmitted to the digital data reception equipment (2) 
in an EMM message specific to an external security module (6, 8) associated with 
said digital data reception equipment (2). 

12. (previously amended ) The method according to claim 1, wherein said 
configuration parameters are transmitted to a digital data reception equipment (2) in 
an EMM message specific to said digital data reception equipment (2). 

13. (previously amended) The method according to claim 6, wherein for a 
given digital data reception equipment (2), said updated list of identifiers is 
transmitted in an EMM message specific to a security module (6, 8) associated with 
this digital data reception equipment (2). 

14. (previously amended ) The method according to claim 1, wherein said 
configuration parameters are transmitted to a group of digital data reception 
equipment (2) in an EMM message specific to a group of external security modules 
(6, 8) associated with one of said group of digital data reception equipment (2). 

15. (previously amended ) The method according to claim 1, wherein said 
configuration parameters are transmitted to a group of digital data reception 
equipment (2) in an EMM message specific to said group of digital data reception 
equipment (2). 

16. (previously amended) The method according to claim 6, wherein 
for a given group of digital data reception equipment (2), said updated list of 
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identifiers of external security modules (6, 8) is transmitted in an EMM message 
specific to a said given group of external security modules (6, 8) associated with 
said digital data reception equipment (2). 

17. (previously amended) The method according to claim 1, wherein 
the configuration parameters for the verification phase are transmitted to a group of 
digital data reception equipment (2) using dedicated software executable in each 
digital data reception equipment (2) according to the identifier of the external security 
module associated with said digital data reception equipment. 

18. (previously amended) The method according to claim 6, wherein 
for a given group of digital data reception equipment (2), said updated list of 
identifiers of external security modules (6, 8) is transmitted to each digital data 
reception equipment (2) in a private flow processed by a dedicated software 
executable in each digital data reception equipment according to the identifier of the 
external security module associated with said digital data reception equipment. 

Claims 19-23 (previously cancelled). 

24. (previously amended) The method according to claim 1 , wherein 
the identifiers of the external security modules (6, 8) are grouped in an encrypted 
list. 

25. (previously amended) The method according to claim 1 , wherein 
the digital data reception equipment (2) includes a decoder and the external security 
modules (6, 8) include access control cards (6) in which information about access 
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rights of a subscriber to digital data distributed by an operator is memorized, and in 
that pairing is done between said decoder and said access control cards (6). 

26. (previously amended) The method according to claim 1 , wherein 
the digital data reception equipment (2) includes a decoder and the external security 
module (6, 8) includes a removable security interface (8) provided with a non-volatile 
memory that can cooperate firstly with the decoder, and secondly with a plurality of 
conditional access control cards (6) to manage access to digital data distributed by 
an operator, and wherein pairing is done between said decoder and said removable 
security interface (8). 

27. (previously amended) The method according to claim 1 , wherein 
the digital data reception equipment (2) includes a decoder provided with a 
removable security interface (8) with a non-volatile memory that can cooperate firstly 
with said decoder, and secondly with a plurality of conditional access control cards 
(6), and wherein pairing is done between said removable security interface (8) and 
said access control cards (6). 

28. (previously amended) The method according to claim 1 0, wherein 
the data are audiovisual programs. 

29. (currently amended ) Digital data reception equipment (2) for pairing 
said equipment to a plurality of different on e or mor e external security modules (6, 8) 
each having a unique identifier to manage access to digital data distributed by an 
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operator, comprising means for executing a computer program stored in a readable 
medium for: 

verifying whether or not the identifier in said external security modules (6, 8) 
is already memorized in the digital data reception equipment (2) upon connection of 
said external security modules (6, 8) to the digital data reception equipment, 

activating the pairing of said digital data reception equipment (2) with said external 
security modules (6, 8) if the unique identifier of the external security modules (6, 8) 
is already memorized in an updated list of external security module identifiers 
transmitted to the digital data reception equipment (2), and 

deactivating the pairing of said digital data reception equipment (2) with said 
external security modules (6, 8) if the unique identifier in the external security 
modules (6, 8) is not already memorized in the digital data reception equipment (2). 

30. (previously amended) The digital data reception equipment 
according to claim 29, further comprising a decoder and wherein the external 
security module (6, 8) is an access control card (6) containing information about 
access rights of a subscriber to said digital data, pairing being done between said 
decoder and said access control card (6). 

31. (previously amended) The digital data reception equipment 
according to claim 29, further comprising a decoder and wherein the external 
security module (6, 8) is a removable security interface (8) provided with a non- 
volatile memory and that is designed to cooperate firstly with said decoder, and 
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secondly with a plurality of conditional access control cards (6), to manage access to 
said digital data, pairing being done between said decoder and said removable 
security interface (8). 

32. (previously amended) The digital data reception equipment 
according to claim 29, further comprising a decoder provided with a removable 
security interface (8) with a non-volatile memory designed to cooperate firstly with 
said decoder and secondly with a plurality of conditional access control cards (6) 
and wherein pairing is done between said removable security interface (8) and said 
access control cards (6). 

33. (previously amended) A decoder that can cooperate with a 
plurality of external security modules (6, 8) to manage access to audiovisual 
programs distributed by an operator, each external security module (6, 8) having a 
unique identifier and including at least one data processing algorithm, comprising 
means responsive to said data processing algorithm for : 

verifying whether or not the identifier of said external security modules (6, 8) 
is already memorized in the digital data reception equipment (2) upon connection of 
said external security modules (6, 8) to the digital data reception equipment, 

activating the pairing of said digital data digital data reception equipment (2) with 
said external security modules (6, 8) if the unique identifier of the external security 
modules (6, 8) is already memorized in the digital data reception equipment (2), and 
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deactivating the pairing of said digital data reception equipment (2) with said 
external security modules (6, 8) if the unique identifier of the external security 
modules (6, 8) is not already memorized in the decoder. 

34. (previously amended) The decoder according to claim 33, wherein 
said external security modules (6, 8) are access control cards (6) in which are stored 
information about access rights of a subscriber to digital data distributed by an 
operator. 

35. (previously amended) The decoder according to claim 33, 
wherein said external security modules (6, 8) are removable security interfaces (8) 
including a non-volatile memory that can cooperate firstly with the decoder and 
secondly with a plurality of conditional access control cards (6) to manage access to 
digital data distributed by an operator. 

36. (currently amended) Removable security interface (8) including a non- 
volatile memory designed for pairing one unique digital data reception equipment (2) 
having a decoder with a plurality of access control cards (6) corresponding to ©f a 
plurality of external security modules, to manage access to digital data distributed by 
an operator, each access control card (6) having a unique identifier and containing 
information about access rights of a subscriber to said digital data, said removable 
security interface further comprising means for recording the identifier of each 
access control card (6) in said non-volatile memory, and at least one data 
processing algorithm for use by said decoder to activate or deactivate the pairing of 
the reception equipment to the control cards. 
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37. (previously amended) The removable security interface according 
to claim 36, comprising a PCMCIA card on which is installed digital data 
descrambling software. 

38. (previously amended) The removable security interface according 
to claim 36, which consists of a software module. 

39. (currently amended) A non-transitory computer readable medium of a 
digital data reception equipment (2) for pairing a decoder in said digital data 
reception eguipment to a plurality of external security modules (6.8) each having a 
unique identifier and in which information about access rights of a subscriber to 
digital data distributed by an operator are stored, said digital data reception 
equipment comprising a computer for executing an executable computer program, 
stored in said non-transitory computer readable medium, including instructions for 
An e x e cutab l e comput e r program stored in a comput e r r e adabl e m e d i um of a d i g i ta l 
data r e c e pt i on e qu i pm e nt (2) that can cooperat e with a p l ura l ity of o xt o rnal s e curity 
modu le s (6, 8) each hav i ng a uniqu e idontifi o r and i n wh i ch informat i on about access 
r i ghts of a subscrib e r to d i gita l data distribut e d by an operator ar e stor e d, sa i d d i g i tal 
data r e c e ption e qu i pment (2) compr i sing a comput e r for executing said e x e cutab le 
comput e r program, wh o roin th e e xecutable comput e r program i nc l ud e s instructions 
for: 

verifying whether or not the identifier of said external security modules (6, 8) 
is already memorized in a list of external security modules transmitted to the digital 
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data reception equipment (2) upon connection of said external security modules (6, 
8) to the digital data reception equipment, 

activating the pairing of said digital data reception equipment (2) with said 
external security modules (6, 8) if the unique identifier in the external security 
modules (6, 8) is already memorized in the digital data reception equipment (2), and 

deactivating the pairing of said decoder with said external security modules 
(6, 8) if the unique identifier in the external security modules (6, 8) is not already 
memorized in the decoder. 

40. (previously amended) The computer program according to claim 
39, further comprising instructions for locally generating pairing control parameters 
of the digital data reception equipment (2) with an external security module (6, 8) as 
a function of a control signal transmitted to said digital data reception equipment (2) 
by the operator. 

41. (previously amended) The computer program according to claim 
39, further comprising instructions for checking if the identifier of said external 
security module (6, 8) is memorized in the digital data reception equipment (2), at 
each connection the external security module (6, 8) with the digital data reception 
equipment (2). 

42. (previously amended) A system comprising a management 
platform (1) and a digital data reception equipment (2) connected to a services 
broadcasting network for communication with the digital data reception equipment 
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and with the digital data reception equipment (2) being paired with a plurality of 
external security modules (6, 8), each having a unique identifier, wherein the system 
further comprises: 

a first module arranged in said commercial management platform (1) for 
generating pairing queries, and 

a second module arranged in said digital data reception equipment (2) 
that will process the generated queries from the first module to prepare a pairing 
configuration to control said pairing, using pairing control parameters generated by a 
computer in said digital data reception equipment based upon 

verifying whether or not the identifier of said external security modules (6, 8) 
is already memorized in an updated list of external security module identifiers 
transmitted to the digital data reception equipment (2) upon connection of said 
external security modules (6, 8) to the digital data reception equipment, 

activating the pairing of said digital data reception equipment (2) with said 
external security modules (6, 8) if the unique identifier of the external security 
modules (6, 8) is already memorized in the digital data reception equipment (2), and 

deactivating the pairing of said decoder with said external security modules 
(6, 8) if the unique identifier of the external security modules (6, 8) is not already 
memorized in the decoder. 

43. (previously amended) The method according to claim 5, wherein 
said control signal is transmitted to a digital data reception equipment (2) in an EMM 
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message specific to an external security module (6, 8) associated with said digital 
data reception equipment (2). 

44. (previously amended) The method according to claim 5, wherein 
said control signal is transmitted to a digital data reception equipment (2) in an EMM 
message specific to said digital data reception equipment (2). 

45. (previously amended) The method according to claim 5, wherein 
said control signal is transmitted to a group of digital data reception equipment (2) in 
an EMM message specific to a group of external security modules (6, 8) associated 
with said digital data reception equipment (2). 

46. (previously amended) The method according to claim 5, wherein 
said control signal is transmitted to a group of digital data reception equipment (2) in 
an EMM message specific to said group of digital data reception equipment (2). 

47. (previously amended) The method according to claim 5, wherein 
the message for managing the verification phase is transmitted to a group of digital 
data reception equipment (2) using dedicated software executable in each digital 
data reception equipment as a function of the identifier of the external security 
module associated with said digital data reception equipment. 

Claims 48-53 (previously cancelled). 
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